Exploiting Rate Limiting to Brute-Force OTP | crAPI |

Disclaimer: This video is only for educational purpose.
Part 2 of crAPI Pentesting Series
This video is about Exploiting Authentication API Endpoint.
Vulnerabilities covered in this video:
Improper Asset Management
No Rate Limiting
Like and Subscribe :)
#bugbounty #pentesting #api #tryhackme #hackerone #apihacking #computerscience #javascript #python #postman #ctf #bughunting #pentesting #hacking #hackingtools #burpsuite #portswigger #ethicalhacking #OAuth #webhacking #programming #websecurity #technology #practical #artificialintelligence #web #recon #bypass

[@KingMessi10-i7k]

love sister such nice video i also comment in api recon video

[@sayemjency1304]

Thanks for your API Pentesting crAPI Series... Eagerly waiting for more videos on API Hacking /Pentesting...

[@CortezLabs]

Love the music!

[@Medusa0xf]

Thank you!

[@firzainsanudzaky3763]

Nice video!

[@ei7HACKER]

Perfect vídeo.

[@CristhianCamiloMartinezCuenca]

this attack didn't worked for me, any advice?

[@thanospl471diganaoamuie6]

Up

[@HieuTrandng]

I don't know why I can't get otp by brute force fuzz :(

[@CristhianCamiloMartinezCuenca]

it doesn't work for me either, any advise?

[@CristhianCamiloMartinezCuenca]

hey, I added -mc 200 (filter to show only that code) at the end of the ffuf command so you can see it easily

[@Vanytee]

Hi what's your discord or Instagram?

[@Medusa0xf]

Check my About